InfoSecBulletin Cybersecurity for mankind
Germany’s top court ruled on Thursday that police can secretly install spy software on phones and computers only for serious crimes.
Key Points:
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
German high court has limited the use of police spy software to serious criminal investigations.
The court called the use of spyware a “serious interference” with privacy rights.
The ruling came from a complaint by a digital rights group that a 2017 law was too broad.
Police cannot use spyware to investigate crimes, as this would violate the law, which carries a maximum sentence of three years.
Digital rights group Digitalcourage in Germany raised concerns about a 2017 reform that permits police to use spy software to monitor encrypted chats, such as WhatsApp, which could impact innocent individuals as well.
The court stated that the 2017 reform of the criminal procedure code was too vague about surveillance areas.
The court states that this kind of surveillance is a serious invasion and should only be used for investigating extremely serious crimes.
As a result, police cannot monitor telecommunications when investigating crimes that carry a maximum sentence of three years as they are not serious enough.
The court stated that investigators’ ability to secretly search suspects’ computers and smartphones partially conflicts with Germany’s Basic Law, but this will continue until new regulations are established.
Cyberattack hits France’s third-largest mobile operator, affecting millions
